do not force new token to be generated on authenticate